Changeflow GovPing Data Privacy & Cybersecurity Prosper Marketplace Data Breach Notification
Priority review Notice Added Final

Prosper Marketplace Data Breach Notification

Favicon for www.cyber.nj.gov NJ Cybersecurity: Public Data Breaches
Published
Detected
Email

Summary

The NJCCIC has issued a notice regarding a data breach at Prosper Marketplace, Inc., a fintech company. The breach, which occurred between June and August 2025, compromised sensitive personal information including SSNs and bank details for impacted individuals. Affected individuals are advised to review identity theft resources.

Published by GP on cyber.nj.gov . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .

What changed

The New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) has published a notice detailing a significant data breach experienced by Prosper Marketplace, Inc., a fintech company. The breach, discovered on September 1, 2025, involved unauthorized access to customer and applicant data between June and August 25, 2025. Compromised information includes names, Social Security numbers or National ID numbers, dates of birth, and bank account details. While no evidence of unauthorized access to customer accounts or funds was found, and customer-facing operations remained uninterrupted, the incident highlights a substantial risk of identity theft for affected individuals.

Prosper Marketplace has reportedly notified impacted individuals via email or mail. The NJCCIC strongly recommends that these individuals consult the provided informational report on Identity Theft and Compromised PII. Compliance officers should ensure that any clients or employees who may have used Prosper Marketplace's services are aware of this breach and encouraged to take protective measures against identity theft, such as monitoring financial accounts and credit reports, and considering credit freezes.

What to do next

  1. Advise affected individuals to review NJCCIC's Identity Theft and Compromised PII informational report.
  2. Encourage affected individuals to monitor financial accounts and credit reports for fraudulent activity.
  3. Consider recommending credit freezes for individuals whose Social Security numbers were compromised.

Archived snapshot

Mar 18, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Prosper Marketplace, Inc.

Post Date: 12/11/2025

Summary

On September 1, Prosper Marketplace, Inc. (“Prosper”), a fintech company that provides financial solutions, discovered a data breach on its systems and stopped the unauthorized access. The investigation determined that between June and August 25, data containing personal information was obtained through queries on company databases that store customer and applicant data. However, there was no evidence of unauthorized access to customer accounts or funds, and customer-facing operations continued uninterrupted. Compromised data includes name, Social Security number or National ID number, date of birth, bank account number, and more. Prosper emailed or mailed notifications to impacted individuals. The NJCCIC recommends that affected individuals review the Compromised PII and Identity Theft NJCCIC Informational Report.

Return to full list >>

Get daily alerts for NJ Cybersecurity: Public Data Breaches

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from GP.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Classification

Agency
GP
Published
December 11th, 2025
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive

Who this affects

Applies to
Financial advisers Fund managers Investors
Geographic scope
National (US) National (US)

Taxonomy

Primary area
Data Privacy
Operational domain
Compliance
Topics
Cybersecurity Financial Services

Get alerts for this source

We'll email you when NJ Cybersecurity: Public Data Breaches publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!